Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa
File: 34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa (raw, json)
Hash identifier: sca1sVLy/N1bgu64F9rvEv0z3H0BRQvjr+nM4uCxu1c=
Subject key identifier: CC:A3:C2:87:E8:33:A1:3C:1A:75:24:5C:E3:2A:E3:E9:BB:AB:74:AA
Certificate issuer: /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial: 620A9A3007E3A05F1288AEC3C568C99E551EB610
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa
Signing time: Tue 17 Dec 2024 14:34:38 +0000
ROA not before: Tue 17 Dec 2024 14:29:38 +0000
ROA not after: Tue 16 Dec 2025 14:34:38 +0000
asID: 269473
IP address blocks: 45.187.168.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 04 Jan 2025 01:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0a:9a:30:07:e3:a0:5f:12:88:ae:c3:c5:68:c9:9e:55:1e:b6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Validity
Not Before: Dec 17 14:29:38 2024 GMT
Not After : Dec 16 14:34:38 2025 GMT
Subject: CN=CCA3C287E833A13C1A75245CE32AE3E9BBAB74AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:8f:8b:64:e5:4e:bc:ea:18:be:93:e5:9f:
4d:01:0f:c4:bc:b6:6e:a1:96:db:b6:4e:b9:6d:bd:
3a:a0:45:f3:50:59:68:dd:b6:5e:2d:f9:22:89:1b:
26:36:e8:4f:1c:3f:87:c8:87:94:37:fb:b0:dc:23:
1f:34:ce:1e:9a:07:2f:01:23:b2:37:92:64:7d:1e:
d0:fd:75:b7:e4:8b:80:1e:59:db:89:94:43:fb:9b:
c7:9c:b8:74:42:d3:8e:7e:97:e8:b7:22:c9:01:d1:
62:ab:63:3f:60:1e:ff:9c:f1:0e:93:a0:d9:a2:8c:
d6:da:c3:7e:02:2a:ee:2a:2c:50:63:fe:84:cb:cb:
ee:35:23:be:c7:1a:40:46:1c:2b:6e:8b:94:22:02:
62:a2:15:93:05:cc:00:44:85:91:2f:90:5f:2b:03:
8a:b6:f2:b1:af:0f:f8:0b:6e:3b:f5:71:d6:19:07:
7d:3c:83:15:e1:1f:ce:69:20:4e:71:90:45:0b:fa:
d7:fa:b3:94:0d:8d:40:4b:a6:ff:61:c4:d7:7e:1f:
35:4b:70:82:52:53:50:c7:e4:6c:8d:f9:37:21:69:
f0:0e:28:6a:b5:20:63:7b:42:df:74:f2:39:74:80:
09:cd:a8:d5:1e:35:ac:af:91:f9:08:02:ff:71:48:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A3:C2:87:E8:33:A1:3C:1A:75:24:5C:E3:2A:E3:E9:BB:AB:74:AA
X509v3 Authority Key Identifier:
keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.168.0/23
Signature Algorithm: sha256WithRSAEncryption
72:01:c5:6b:e2:a7:e1:db:8b:89:c0:4f:e6:e1:04:a7:f8:e8:
9e:a0:9b:15:5b:62:05:4f:73:c7:5d:75:b4:11:c3:29:7c:ba:
82:74:a4:9f:1a:b9:82:f1:07:72:b4:56:98:9a:61:f3:ab:db:
e9:17:86:ec:e4:2b:14:a7:55:d8:06:f0:0b:70:c0:2d:d1:22:
c9:93:d2:69:97:92:b1:a9:fb:ac:c2:03:3d:7f:a1:18:33:55:
cc:38:82:72:99:71:b4:80:8a:8b:b2:db:2d:20:9d:92:9b:60:
c3:cc:56:c6:0b:1f:3b:ff:41:00:01:d4:00:8f:ea:c2:90:7b:
c8:0a:b3:2f:70:8b:69:88:54:a7:be:3f:ef:e9:1e:af:97:8c:
6f:56:2b:91:43:c0:5c:eb:a1:0d:f1:e2:0c:53:2b:cf:b5:1b:
0b:22:45:bc:8c:5d:7c:2d:29:d6:c6:5f:78:54:e4:ae:bb:4e:
a4:ee:3e:48:1b:fb:19:c5:90:10:24:6d:b7:f3:a4:8f:b8:29:
ff:19:eb:9f:d4:8e:fb:69:1c:cd:28:d6:3c:40:9b:06:47:7f:
c3:7b:f4:ae:b3:d2:a6:a0:17:c3:cb:90:be:23:42:0e:de:69:
f3:5c:a6:91:cb:55:44:f5:5c:f2:9a:e7:3a:d3:f1:c3:f9:c3:
29:71:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:48 2025 by rpki-client